UGN Security
Posted By: loanbanker naming php variables - 02/12/04 08:20 PM
I have read that I cannot have a space when naming a php variable. Here is my issue. I have a form im working with that someone enters there first name, last name etc..

When im writing the php script can i use the underscore for the naming process.. In other words I know I cannot use $First Name as a valid variable. But can I instead use
$First_Name ? Or am I completely way off base here? Any help is appreciated.
Posted By: Gremelin Re: naming php variables - 02/13/04 12:46 AM
That's what you're supposed to use; it's invalid html to have spaces in a name declaration.
Posted By: §intå× Re: naming php variables - 02/13/04 12:13 PM
Correct. $FirstName, $first_name, $First_name, $First_Name

These are all different but valid varriables.
You could also have something like...


**Replace ) with > and ( with <
Code
if(!$form_step){
//above line breaks script up and says if no value is set for $form_step do the following.
(Form=My_form.php?form_step=submit)
First Name(br)
(input name="Name[]" id="Name[]" Value="<? echo "$Name[0]"; ?>")
(br)
Last Name(br)
(input name="Name[]" id="Name[]" Value="<? echo "$Name[1]"; ?>")
}
The above turns the first and last anme variables into an array of Name. All array's start at 0 by default. So the First Name would be $Name[0] and Last Name would be called with $Name[1]. Now we work some magic.

Code
//in same document below the above
if($form_step == "submit"){
if ($Name[0] == ""){
$Name[0] = "Please Enter your First Name";
}
if ($Name[1] == ""){
$Name[1] = "Please Enter your Last Name";
}

if ($Name[0] == "Please Enter your First Name"){
?>
(meta http-equiv="refresh" content="5;url=My_form.php")
(center)
You did not properly complete this form.  Taking you back.
?>
     }
if ($Name[1] == "Please Enter your First Name"){
?>
(meta http-equiv="refresh" content="5;url=My_form.php")
(center)
You did not properly complete this form.  Taking you back.
<?
     }
//if the above steps are not executed then you 
//and start the trim and insert functions
}
See the following links for some ideas
http://us2.php.net/manual/en/ref.array.php


*This is a must for form data*
http://us2.php.net/manual/en/function.trim.php

http://us2.php.net/manual/en/control-structures.for.php

Make all name in your form something like form_feild[]. Now you can trim them all using something like a while or for loop

http://us2.php.net/manual/en/control-structures.for.php
http://us2.php.net/manual/en/control-structures.while.php


With arrays you will want to know these commands also.
http://us2.php.net/manual/en/function.count.php
http://us2.php.net/manual/en/function.explode.php
http://us2.php.net/manual/en/function.split.php


$REMOTE_ADDR - Gets user IP
more environment variables help

Let me know if this helps

http://us4.php.net/getenv
Posted By: loanbanker Re: naming php variables - 02/14/04 01:12 AM
Thanks Gizmo for clearing it up for me.

Sin, I have to say that your post is absolutely perfect in timing. Arrays are the next chapter!

Im reading your links now. Thank you for the help!
Posted By: §intå× Re: naming php variables - 02/14/04 12:30 PM
If you use session try to put the secure(meaning encrypted or non security related) user info you need on all other pages in the session at login time using an array. This will minimise queries and hopefuly speed up page loads.
© UGN Security Forum